
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa
File: 56AD05C0D8F711F09DAB56B975D3641D.roa (raw, json)
Hash identifier: q89Jg/7hPlysCgYbH3zg0CvpgeLJQkUN21WMNq0ChPU=
Subject key identifier: 50:8C:43:08:9E:8C:74:16:8D:9B:CD:A1:7F:CA:6C:28:38:E7:9E:EC
Certificate issuer: /CN=A9137E65/serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Certificate serial: 08CB
Authority key identifier: 9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa
Signing time: Mon 02 Mar 2026 14:23:59 +0000
ROA not before: Thu 08 Jan 2026 12:39:25 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 140962
IP address blocks: 103.153.210.0/23 maxlen: 24
2406:4bc0::/32 maxlen: 32
2406:4bc0:1::/48 maxlen: 48
2406:4bc0:2::/48 maxlen: 48
2406:4bc0:3::/48 maxlen: 48
2406:4bc0:4::/48 maxlen: 48
2406:4bc0:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:11:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2251 (0x8cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137E65, serialNumber=9E9D0E96AE427F66B58F66B224A6EF5662761E4B
Validity
Not Before: Jan 8 12:39:25 2026 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a59d7f-c2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:eb:de:f6:e1:07:5a:fa:a1:6e:c1:21:91:ff:
40:d9:d6:8d:97:7f:52:98:c9:8d:27:ca:1d:65:85:
f6:44:a9:cc:8c:d3:20:53:6a:bd:d5:4c:6b:6e:0a:
e4:7e:0c:ac:de:5d:0a:f1:ab:ed:92:49:9f:3b:8d:
14:52:7b:ae:a0:f0:63:86:2c:b3:29:d8:87:4a:d3:
a2:c1:51:12:5c:f1:c8:49:07:ed:47:53:72:5d:03:
be:5a:2f:db:74:7d:b8:6a:d6:8c:ce:ee:27:d3:da:
e5:6a:93:e2:ff:3c:9f:8a:92:c0:7b:27:50:62:28:
72:3d:8f:ec:2c:88:18:1e:ae:92:69:a7:5e:65:1f:
af:8c:4f:6b:a0:6d:55:98:8b:95:20:3f:3c:91:03:
7e:16:ba:71:19:36:97:8c:8a:56:6c:b6:32:2c:6d:
17:e6:b7:49:f5:90:99:c0:b9:56:14:38:10:62:30:
21:36:24:14:5a:05:ef:34:d7:d7:78:07:ee:2f:06:
4e:2b:fa:9c:f5:a2:c0:e1:45:e8:a1:2f:49:61:9b:
ce:de:a1:bf:4d:e2:9f:22:ac:8a:c0:ab:45:c5:62:
57:31:7d:ba:80:3e:0f:90:d9:a4:51:81:85:e3:e4:
01:61:d8:32:ed:b7:9d:5c:36:1d:aa:0c:09:6d:e6:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:8C:43:08:9E:8C:74:16:8D:9B:CD:A1:7F:CA:6C:28:38:E7:9E:EC
X509v3 Authority Key Identifier:
keyid:9E:9D:0E:96:AE:42:7F:66:B5:8F:66:B2:24:A6:EF:56:62:76:1E:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/np0Olq5Cf2a1j2ayJKbvVmJ2Hks.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E65/5ED05532D4D311EA97353944C4F9AE02/56AD05C0D8F711F09DAB56B975D3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
103.153.210.0/23
IPv6:
2406:4bc0::/32
Signature Algorithm: sha256WithRSAEncryption
27:47:76:e1:a4:d8:0f:33:85:3c:63:fd:11:99:50:30:c6:c8:
96:4f:90:ea:79:9b:92:5a:72:39:9a:de:b5:86:dc:11:7a:69:
bb:99:1b:4a:0d:96:2d:84:d9:b0:3a:a7:85:d3:40:70:8c:a7:
c6:f0:2d:5e:2f:f0:be:50:99:fe:26:e9:c1:12:e2:61:6a:e2:
1e:ee:85:bf:f3:87:ad:cb:c1:3f:1e:75:96:ba:12:a8:dd:2b:
20:dd:14:c6:be:ff:bf:ee:11:3f:ee:a2:e1:86:90:bd:41:2c:
40:96:88:54:41:87:ad:9c:1d:6f:74:cb:ae:ae:56:ac:2d:75:
f2:cf:ff:3a:36:3a:79:92:51:f1:d7:f5:ac:b6:7d:d5:c7:46:
6b:9c:56:d2:0f:89:3b:c8:72:14:de:04:40:98:40:9d:6a:79:
f4:cd:7a:4b:0e:8d:4a:fe:31:45:1b:59:07:80:ab:00:67:60:
2e:e1:83:d7:fb:51:41:45:38:77:6e:21:19:d1:a0:fa:d3:46:
6b:2b:90:c5:43:ad:6d:02:0e:77:a8:fd:0e:85:f4:fd:e7:d9:
77:47:68:76:42:ef:d6:a0:9f:c5:3b:ef:c3:c3:22:8f:e8:b3:
d4:a6:dd:46:e3:46:09:db:76:22:35:f7:d5:d1:67:39:fe:03:
3f:c2:01:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:26:41 2026 by rpki-client